Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/7QLbBln3vPUN48ZF4xXmntfu-EM.roa
File: 7QLbBln3vPUN48ZF4xXmntfu-EM.roa (raw, json)
Hash identifier: Rifb7CIq42f2gWKRm6y6g+dYzuh1K42iL6RIeNdN9Vs=
Subject key identifier: ED:02:DB:06:59:F7:BC:F5:0D:E3:C6:45:E3:15:E6:9E:D7:EE:F8:43
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 06B59CF5
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/7QLbBln3vPUN48ZF4xXmntfu-EM.roa
Signing time: Thu 28 Apr 2022 19:39:10 +0000
ROA not before: Thu 28 Apr 2022 19:39:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62164
IP address blocks: 45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
185.149.232.0/22 maxlen: 22
185.149.232.0/24 maxlen: 24
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112565493 (0x6b59cf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Apr 28 19:39:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed02db0659f7bcf50de3c645e315e69ed7eef843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:c7:b4:3c:aa:79:e8:9d:fb:3a:10:d1:68:
52:78:9d:f1:da:97:a4:4d:e6:fe:5d:b2:bb:a2:60:
3e:38:58:61:9e:56:f6:6c:ab:81:b7:31:1d:f7:04:
4b:0b:ba:ff:be:c9:c2:2a:ba:6a:cf:8f:79:f4:08:
4a:66:0e:a6:bc:b4:93:3e:b8:f8:26:37:b4:f3:18:
f4:1a:a8:f2:87:a2:0c:cb:42:09:a3:16:1f:2e:d3:
11:0d:89:f2:09:c0:9f:e9:83:f8:0d:f3:09:9c:4e:
c6:47:24:a5:90:06:82:b3:52:90:29:5a:6e:a7:ab:
84:62:31:fd:57:b2:1d:2e:9e:c3:99:4b:2c:41:0e:
bb:fc:1d:fa:ce:39:4f:3e:fe:d2:66:a2:81:7c:f0:
80:5a:81:6a:0f:e7:e2:4c:1f:2b:17:31:10:b5:2d:
91:f0:6e:74:3f:4f:69:1f:05:86:9b:54:3d:f8:71:
1b:81:99:a5:23:c6:34:10:bb:1d:6d:a0:43:23:bd:
50:5a:7f:f5:ba:b4:40:a2:14:3f:e1:c5:cb:69:d6:
a0:70:3f:cc:09:f9:0e:6c:b5:a7:c8:4a:32:88:91:
08:22:ef:59:ae:6e:b1:7c:38:b5:f7:cc:db:3e:2e:
49:36:61:b9:93:fc:15:0c:f6:ec:0b:7c:3b:8d:d4:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:02:DB:06:59:F7:BC:F5:0D:E3:C6:45:E3:15:E6:9E:D7:EE:F8:43
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/7QLbBln3vPUN48ZF4xXmntfu-EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/23
45.11.88.0/22
185.149.232.0/22
185.202.174.0/24
193.39.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:79:b4:d7:1f:0c:0e:f3:6d:63:16:59:7c:f0:1d:7f:b9:47:
37:29:f0:7e:2d:6b:6d:40:c1:f6:37:6c:e4:00:c7:2b:d1:0a:
8a:9f:19:02:eb:3e:ce:40:eb:58:7c:af:6a:9e:dc:20:98:4f:
31:19:5d:a5:ce:97:2b:1d:9f:b8:f6:26:c1:c8:42:92:b8:1c:
ed:3d:85:37:c9:99:9c:d6:77:bc:43:98:5f:68:62:f1:b2:34:
73:78:d4:10:e5:88:b8:8e:14:71:b9:3a:41:58:6a:6a:50:cc:
95:6c:7f:e5:48:c0:5c:12:b9:9f:67:0f:2a:6d:77:91:33:08:
fe:54:5b:a5:2a:87:7b:ee:1c:91:9f:78:9d:95:47:4b:5e:6e:
a1:72:be:0c:e9:d4:47:3d:1b:8d:3a:49:3f:8e:80:88:27:03:
8a:83:59:77:a0:93:f1:2b:b9:63:e5:3d:05:55:ed:c8:34:f3:
34:1a:04:b7:e7:df:2c:eb:81:38:35:74:02:da:ed:61:be:a8:
0d:81:e9:71:04:f6:df:0c:a7:4e:c7:29:40:e8:a2:4d:2f:74:
5e:96:7b:68:8f:64:33:f1:fa:6f:fa:48:a9:6a:31:26:17:89:
51:76:97:07:66:00:97:08:37:7d:d0:45:06:41:16:aa:20:75:
df:3c:26:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org